MichaelC

*PERFORMED IN SAFE MODE* Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:56:43, on 12/9/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Safe mode with network support Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microso

I cant run the kaspersky online scanner because java won't let me download because it says administrative policy prevents it. Also, i can't do it in normal mode unless i take out the ethernet cord. If i leave the ethernet cord connected and try it in normal mode, the computer freezes on the sign in menu. Internet Explorer wouldn't even open up in normal mode. I'll try again.

BY THE WAY...I'VE BEEN DOING THIS ALL IN SAFE MODE. I DON'T KNOW IF IT MAKES A DIFFERENCE BUT I FIGURE I TELL YOU. Malwarebytes' Anti-Malware 1.31 Database version: 1472 Windows 5.1.2600 Service Pack 2 12/7/2008 7:55:55 PM mbam-log-2008-12-07 (19-55-55).txt Scan type: Quick Scan Objects scanned: 56727 Time elapsed: 3 minute(s), 58 second(s) Memory Processes Infected: 0 Memory Modules Infected: 4 Registry Keys Infected: 29 Registry Values Infected: 3 Registry Data Items Infected: 3 Folders Infected: 2 Files Infected: 22 Memory Processes Infected: (No malicious items detected) Memory Modules Inf

I also want to add that i tried starting my computer normally and when i get to the log on page to choose an account the computer freezes. However, i have noticed that the computer starts and does not freeze when i take out the ethernet cord. When the cord is connected it freezes. As a result, i can only use in safe mode.

======== PROCESSES ========== Process explorer.exe killed successfully. ========== SERVICES/DRIVERS ========== Service F111230803DEBA54 stopped successfully. Service F111230803DEBA54 deleted successfully. ========== REGISTRY ========== ========== FILES ========== c:\program files\Webtools moved successfully. ========== COMMANDS ========== User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. Local Service Temporary Internet Files folder emptied. Windows Temp folder emptied. Java cache emptie

ComboFix 08-12-06.04 - Adrieann Rivera 2008-12-06 18:11:40.1 - NTFSx86 NETWORK Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.298 [GMT -5:00] Running from: c:\documents and settings\Adrieann Rivera\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\Adrieann Rivera\Desktop\WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\Adrieann Rivera\Application Data\gadcom c:\documents and settings\Adrieann Rivera\Application Data\gadcom\c

SmitFraudFix v2.381 Scan done at 17:18:34.09, Sat 12/06/2008 Run from SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in safe mode »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Killing process »»»»»»»»»»»»»»»»»»»»»»»» hosts 68.44.244.240 idenupdate.motorola.com »»»»»»»»»»»»»»»»»»»»»»»»

I believe i have the Trojan Fake Alert Virus. Can someone help me? My CPU functions best in safe mode. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 7:07:06 PM, on 12/4/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Safe mode with network support Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Internet Explorer\iexplore.exe C

HI Brian, It appears that the i was able to sign on the safe mode and appears to be a Trojan Virus that is giving me problems. Any ideas how i can eliminate it. I have the AVG antivirus software. And i am always getting a malware system error notice on teh bottom left with a yellow sign with an exclamation point. Any Ideas??? Thanks.

Hi Brian, I will do that as soon as i get home and try. i should tap F8 when the windows screen comes up before the log on accounts screen appears? Is that right?

WHENEVER I TURN ON MY COMPUTER AND GET TO THE LOG IN SCREEN TO CHOOSE WHICH ACCOUNT I WANT TO LOG IN ON, MY COMPUTER FREEZES AFTER I CHOOSE THE ACCOUNT. OBVIOUSLY I CANT GET TO CONTROL PANEL BECAUSE THE COMPUTER JUST FREEZES ON THE LOG IN ACCOUNT PAGE...IS THERE ANYTHING I CAN DO.. BTW...THE COMPUTER WAS WORKING FINE THE NIGHT BEFORE... SOMEONE PLEASE HELP ME